Firetruck

CVE-2021-38000

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Google Chromium Intents contains an improper input validation vulnerability that allows a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
androidgoogle / android-affected
chromegoogle / chrome>= 0, < 95.0.4638.69affected
ChromeGoogle / Chrome>= unspecified, < 95.0.4638.69affected